This English version is authoritative. A certified translation is pending; please do not rely on any machine translation of this document.

1. Who we are

OptionsLive (the "service", "we", "us") is a non-custodial copy-trading tool operated by [OPERATOR ENTITY]. We are the controller of the personal information described here. Contact us about privacy at [email protected].

2. Information we collect

Information you give us:

• your email address or phone number, and a password. We store passwords only as a salted hash — we cannot see or recover your password;
• an optional display name and profile details you choose to add; and
• a referral code, if you arrive through one.

From connecting your exchange account:

• the API key and secret you provide for your exchange account. The secret is stored ENCRYPTED at rest and is used only to place strategy orders and read the market and account data needed to run and report on your copying — never to withdraw;
• trading data from that account, such as orders, fills, positions, and balances, used to operate copying and show your performance.

When you pay profit-sharing fees:

• records of your prepaid profit-sharing fee balance — the funds you send to top it up, the fees deducted from it, and related transaction references (for example a crypto transaction hash). These fee payments are non-refundable and non-withdrawable.

From third-party sign-in (only if you use it):

• from Google: a Google account identifier and your email address;
• from Telegram: your Telegram ID and username, which we also use to send notifications if you opt in.

Automatically:

• your IP address and basic device/browser information, used for security, abuse prevention, and rate limiting;
• a session cookie to keep you signed in, and usage information about how you interact with the service.

We do not collect government-ID or KYC documents. We do not hold or have withdrawal access to your trading capital, which stays in your own exchange account — the only funds you send us are the non-withdrawable profit-sharing fees described above.

3. How we use your information

• to create and operate your account and place the strategy's orders in your connected exchange account according to your settings;
• to send you trade, security, and account notifications (by push or Telegram, where you have enabled them);
• to show your copying activity and performance;
• to calculate and charge profit-sharing fees and maintain your prepaid fee balance;
• to secure the service, prevent fraud and abuse, and enforce our Terms;
• to attribute referrals; and
• to provide support and to comply with legal obligations.

Where the law requires a legal basis (for example under the GDPR), we rely on performance of our contract with you, our legitimate interests in operating and securing the service, your consent (for optional notifications), and compliance with legal obligations.

4. Cookies and similar technologies

We use only essential storage: a signed session cookie to keep you logged in and protect against cross-site request forgery, and a small amount of local storage for your preferences (such as language and theme). We do not use advertising cookies.

5. How we share information

We do NOT sell your personal information. We share it only:

• with your exchange (Bybit), through the API keys you provide, in order to place and manage orders in your own account;
• with Google or Telegram, if you choose to use them to sign in or receive notifications;
• with service providers that host and support the service, under confidentiality obligations; and
• with authorities when required by law, or to protect the service, our users, or others.

We never disclose your API secret to other users, and we never withdraw or move your funds.

6. Notifications

If you enable them, we send trade and account notifications by web push and/or Telegram. You can turn these off at any time in the app, in your browser, or in Telegram.

7. Data retention

We keep your information for as long as your account is active and as needed to provide the service, then for any period required by law. When you disconnect your exchange keys, the stored secret is removed. You can ask us to delete your account and associated data, subject to legal retention requirements.

8. How we protect your information

We encrypt API secrets at rest, store passwords only as salted hashes, serve the site over encrypted connections, and restrict access to data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Keep your credentials safe, and do not grant withdrawal permission on the API keys you connect.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can disconnect your exchange keys or close your account at any time, and you can contact us to exercise your rights at [email protected]. [OPERATOR / counsel: add any GDPR / UK GDPR / CCPA-specific disclosures and supervisory-authority contacts that apply.]

10. International transfers

We and our providers may process your information in countries other than yours. Where required, we use appropriate safeguards for such transfers. [OPERATOR: state the hosting region and the transfer safeguards used.]

11. Children

The service is not intended for anyone under 18, and we do not knowingly collect information from children.

12. Third-party services

Your exchange (Bybit) and, if you use them, Google and Telegram handle your information under their own privacy policies, which we do not control.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we will take reasonable steps to let you know.

14. Contact

Questions about your privacy: [email protected].